Privacy Policy — PNW2 Analytics Hub

1. Overview & Purpose

PNW2 Analytics Hub is an internal program-evaluation application operated for the Cultural Leadership Program Batch 2 (โครงการผู้นำการเปลี่ยนแปลงทางวัฒนธรรม รุ่นที่ 2 — ปนว. 2). It is restricted exclusively to authorized researchers, instructors, and program administrators.

2. Information We Access & Google API Usage

• Authentication Profile: When signing in with Google OAuth or configured researcher credentials, we receive your name and email address solely to verify authorization (via ALLOWED_EMAILS or AUTH_USERS) and record audit attribution (such as who verified a form or coded a qualitative response).
• Google Sheets Data: The application connects to the team's designated master Google Spreadsheet using a project service account to display aggregated evaluation scores and store researcher annotations (themes, qualitative codes, digests, and transcribed paper entries).
• Google Drive Storage: When an authorized administrator connects Google Drive (https://www.googleapis.com/auth/drive.file), the application only accesses and stores scanned evaluation documents explicitly uploaded through the dashboard's scan inbox into the configured folder. It does not browse, read, or modify unrelated files in your Google Drive.

3. Data Protection & PDPA Safeguards

• Direct identifiers from raw survey exports (such as personal national IDs or emails) are masked and pseudonymized (raw_id_masked and raw_id_hash) prior to publishing to the dashboard.
• Access to all analytics pages, printable reports, raw tables, and exports requires active authentication.
• We do not sell, rent, advertise with, or transfer Google user data or evaluation records to any third-party marketing or data-broker services.

4. Data Retention & Contact

Evaluation records and uploaded paper scans are retained only for the authorized duration of the PNW2 research and evaluation project. Authorized personnel may request removal or correction of records directly via the program administrator or support contact email listed on the Google OAuth consent screen.